(Updated) Create Excel spreadsheets from Copilot Notebook content

🚨 The Signal: Copilot Notebooks can now generate Excel spreadsheets from collected content, streamlining data structuring. This feature is enabled by default, potentially increasing data flow and requiring review of existing data governance policies.

The Impact

Users with Copilot access can generate Excel files, increasing the risk of sensitive data being transferred or stored in new locations without explicit governance.

• End users: May inadvertently create spreadsheets with sensitive data, bypassing existing controls.
• Security teams: Need to verify DLP policies adequately cover new data generation and transfer paths.
• Data owners: Must ensure classification and labeling policies extend to Copilot-generated Excel files.
• Compliance officers: Should review audit trails for data movement from Copilot Notebooks to Excel.

The Action

1. Review existing Microsoft Purview Data Loss Prevention (DLP) policies to ensure coverage for data generated from Copilot Notebooks and exported to Excel.
2. Verify Microsoft Purview Information Protection (MPIP) sensitivity labels are correctly applied to data within Copilot Notebooks and persist upon export to Excel.
3. Communicate to users the importance of applying appropriate sensitivity labels to content within Copilot Notebooks, especially before generating spreadsheets.
4. Monitor Microsoft 365 audit logs for unusual data export activities originating from Copilot Notebooks.

Domain: M365-Apps · Impact: high · Workload: M365 Apps